Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: zAs0ghbYv/IRhXYckBm40gw+8ULmkgQw2Lt1cd356z0=
Subject key identifier: EB:6A:5B:29:F2:6A:E5:01:43:A8:95:DF:15:EB:8C:6E:BD:24:3A:0C
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0197CE71F3B46B066B09BC4ADABECD25A602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0931
Signing time: Thu 03 Jul 2025 04:01:03 +0000
Manifest this update: Thu 03 Jul 2025 04:01:03 +0000
Manifest next update: Fri 04 Jul 2025 04:01:03 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: QCFYkXfMNUUOciXGbK4Df0CZ2aGbT9yqUCYLotiIeWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:71:f3:b4:6b:06:6b:09:bc:4a:da:be:cd:25:a6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Jul 3 04:01:03 2025 GMT
Not After : Jul 4 04:01:03 2025 GMT
Subject: CN=eb6a5b29f26ae50143a895df15eb8c6ebd243a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:29:d9:cf:26:d6:c4:d4:54:1d:79:38:52:
85:41:98:a8:56:9d:71:8b:d0:76:7f:62:e6:97:51:
90:1f:e9:52:aa:31:e3:b1:6d:d6:90:34:c0:93:47:
8f:69:2c:7a:0a:6c:cf:a6:d1:5b:d1:24:60:63:2a:
99:4a:22:f5:77:56:a2:3a:03:de:25:d0:60:46:c4:
97:4b:3f:82:c1:97:be:3b:eb:4e:08:37:29:43:75:
9a:e1:8b:fa:5c:a2:c0:0a:b1:9a:94:96:f4:75:72:
6e:01:b1:51:c1:00:eb:3b:2b:8c:86:8d:cb:06:c2:
a4:12:23:d6:4c:f4:df:4a:99:9f:31:77:44:fc:51:
3c:ca:49:f5:f7:50:c7:d2:c0:ac:f9:50:d0:5e:ed:
e1:aa:00:fb:f5:f4:f1:20:b0:59:db:3a:98:ee:fa:
5d:fb:e5:ac:9a:78:34:94:95:a4:4c:98:16:ae:a1:
bd:11:d6:3b:55:1d:b4:bd:ac:bc:55:76:6a:f7:c6:
46:2c:32:b4:95:98:66:f7:23:14:51:dc:98:4b:72:
9f:5e:96:88:f9:4c:8f:34:ce:f2:3f:df:1f:d7:65:
78:bb:4a:b0:9b:39:c3:28:0d:4f:ec:1b:a9:f1:42:
16:89:73:e4:cc:e7:f5:e6:fc:69:e1:6b:94:55:16:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:5B:29:F2:6A:E5:01:43:A8:95:DF:15:EB:8C:6E:BD:24:3A:0C
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c7:cb:83:77:1f:1a:8a:1e:a2:3d:b0:8d:ed:1d:36:42:e5:
cc:52:9a:70:91:87:7b:35:26:61:6c:22:99:4f:ad:a1:51:df:
ac:a3:0f:cb:fc:6d:e6:b5:48:5f:35:f3:df:43:ce:7a:1b:fc:
3d:9d:38:04:55:af:be:35:c5:e1:79:72:9d:21:03:99:d7:e7:
04:ec:2b:30:19:67:44:3f:97:d5:07:ee:02:96:72:be:b0:44:
75:cb:c7:6d:d2:c0:79:2d:d3:e9:47:f0:d7:3d:7e:17:67:c3:
b8:d0:95:3d:36:47:bc:3a:69:42:d6:b4:33:4f:a9:35:0d:e2:
5f:b1:12:af:7f:2b:f6:f8:53:2d:41:1a:ec:b8:58:fc:29:74:
67:eb:e0:f9:5b:f7:f3:4f:9b:85:77:dc:05:bb:c7:d2:6b:75:
ba:02:3b:ff:15:0c:11:87:23:c7:15:a4:3b:dd:1d:cf:8e:b6:
15:12:0c:e7:42:0f:4f:7a:b3:70:f9:88:16:19:62:f1:54:bd:
7a:b5:33:34:99:f2:5a:b7:ef:1e:a7:d9:0d:48:d6:8e:5b:a5:
c0:3e:bd:91:71:78:fe:ac:e2:1e:ab:ce:83:43:13:6b:d7:e9:
30:e2:e8:ed:ca:12:eb:9a:27:e0:df:62:b4:b2:e3:97:4a:60:
68:74:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:14:41 2025 by rpki-client